Privacy policy
Last updated: 12 October 2026
This policy explains how Mobius Industries Ltd collects and uses personal information: through this website, when we work with clients and their audiences, and through the tools and platform connections we use to run and report on campaigns.
Who we are
Mobius Industries Ltd is a theatre and arts marketing, PR and distribution agency, registered in England and Wales (company number 05731764). Our registered office is The Lower Vestry, St George's Bloomsbury, 6–7 Little Russell Street, London WC1A 2HR.
We are the data controller for the information described here, except where we process data on behalf of a client (see "Working for our clients" below). For any privacy question, email team@mobiusindustries.com or call +44 (0)20 3195 6269.
What we collect
- Information you give us: your name, email address, organisation, job title, phone number and anything else you include when you fill in a form, email us, sign up to our newsletter or Media Briefing, or work with us.
- Business contact information: details of people at theatres, producers, venues, media outlets, community organisations and funders that we hold to run our business, often from public sources such as organisation websites, published programmes and industry directories.
- Website usage information: pages visited, how you arrived, device and browser type, approximate location and, for some visitors, the organisation associated with your network. This is collected by cookies and similar technologies (see below).
- Email engagement: whether our emails are delivered and opened, and which links are clicked.
- Campaign and advertising data: aggregated performance data from advertising and social media accounts we manage, such as reach, clicks, spend and conversions. We also receive ticket sales reports from venues and ticketing systems. These are normally aggregated, by performance and date, and do not identify individual ticket buyers.
How we use it, and our legal basis
- To respond to enquiries and provide our services: to take steps at your request before entering a contract, and to perform the contract.
- To run our business: managing client and supplier relationships, keeping records, invoicing and new-business development. Our legal basis is our legitimate interests in running and growing an arts marketing agency.
- To send marketing emails, including the Media Briefing: to people who have subscribed, or to business contacts where the law allows it, under our legitimate interests or your consent. Every email includes a way to unsubscribe.
- To understand and improve our website: analytics cookies, used with your consent where required.
- To plan, run, measure and report on campaigns for our clients: see the next two sections.
- To meet legal obligations: for example tax and accounting records.
Working for our clients
When we market a show for a client, we may handle information about that client's audiences. Examples include ticket sales reports, audience research summaries, and contact lists a client asks us to email. In this work we act as a processor on the client's behalf, following their instructions under a written agreement, and the client is the controller. If you are a client's customer and have questions about your data, please contact the client directly. We are happy to pass a request on.
Where we contact community organisations, schools, societies and similar groups about shows (for example group-booking or outreach emails), we use business contact details for that organisation. We do so under our legitimate interests, and we honour every opt-out.
Our tools and platform connections
We use our own internal software to plan, build and measure campaigns. It connects to advertising and social media platforms, including Meta (Facebook and Instagram), Google Ads, Google Analytics, TikTok and LinkedIn, through those platforms' official APIs. It is available only to Mobius staff.
- Through these connections we read performance data for the advertising accounts, pages and pixels we manage, such as spend, impressions, clicks, landing page views, conversions, and age and gender breakdowns. This data is aggregated, does not identify individual people, and is used only to report to our clients and improve their campaigns.
- We may also create and edit advertising campaigns on accounts we manage for clients, with their authority.
- We store this data securely with our service providers (see below). We do not sell it, and we do not use data received from these platforms to build profiles of individuals or for any purpose other than managing and reporting on the relevant campaigns.
- Our use of data received from Meta's platforms complies with Meta's Platform Terms. To have data related to you deleted, see "Your rights" below, or email team@mobiusindustries.com.
Cookies and similar technologies
Our website uses:
- Google Analytics and Google Tag Manager: to understand how visitors use the site.
- HubSpot: to manage forms and contacts and to understand which pages are useful to the people who get in touch.
- LinkedIn Insight Tag: to measure the reach of our LinkedIn activity and understand the professional audience visiting the site.
- Apollo: to identify the organisations, not the individuals, whose networks visit our site, so we can follow up relevant business enquiries.
You can block or delete cookies in your browser settings. Doing so will not stop the site working.
Who we share it with
We do not sell personal information. We share it only with:
- Service providers that help us run our business, such as cloud hosting and databases, CRM and email (for example HubSpot), project and file management, accounting, and the advertising platforms we manage campaigns on. They act on our instructions and must keep data secure.
- Our clients, for campaign reporting. This is usually aggregated and not about identifiable individuals.
- Professional advisers, regulators or law enforcement, where required by law.
International transfers
Some of our service providers store or process data outside the UK, for example in the European Union, the United States or Australia. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.
How long we keep it
We keep personal information only as long as we need it:
- enquiries and business contacts: while the relationship is active and for a reasonable period afterwards
- financial records: six years, as the law requires
- marketing contacts: until you unsubscribe or the contact is no longer relevant
- client campaign data: for the duration of the engagement, then archived or deleted in line with our agreement with the client
Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you
- have it corrected
- have it deleted
- restrict or object to how we use it, including objecting at any time to direct marketing
- data portability
- withdraw consent where we rely on it
To make a request, email team@mobiusindustries.com. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.
Security
We use access controls, encryption in transit and reputable service providers to protect personal information. Access is limited to the people who need it.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.